$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft File: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json) Hash identifier: T82Sg6tkB0SmSUH4RR378l3c5qXQiebnRmafGlXg608= Subject key identifier: 6E:78:C8:E6:9E:4E:BB:E8:61:01:A5:61:21:46:B8:7C:E2:83:FE:A3 Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB Certificate issuer: /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft Manifest number: 0205 Signing time: Thu 07 Aug 2025 02:44:36 +0000 Manifest this update: Thu 07 Aug 2025 02:44:35 +0000 Manifest next update: Thu 14 Aug 2025 02:44:35 +0000 Files and hashes: 1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: +sLaEGz79XBNg0pV2fpyeLt1q39Qtu/xTMalomTSA6Y=) 2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: ALMLm78gllLBfFwEbfYMxy6G6W9jUB1EmmnPpTHelsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB Validity Not Before: Aug 7 02:44:35 2025 GMT Not After : Aug 14 02:44:35 2025 GMT Subject: CN=68941314-4d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:66:51:33:1d:7b:d4:01:6d:19:ce:0f:ae: 59:b5:ca:b9:62:60:77:a4:6e:97:92:58:76:9b:e6: 1f:20:69:c6:06:0d:11:bb:0f:b3:99:5b:55:7f:9a: 81:2f:3f:66:12:48:fc:9b:76:06:c6:d8:2d:e4:1c: cc:85:b6:ff:e7:b1:7c:70:38:83:87:7c:76:91:af: 53:57:8c:ce:84:3b:e1:2e:9d:18:ab:4c:d7:70:e4: 9a:32:7f:fd:48:e0:4c:a3:24:3a:0b:80:d5:1d:6b: cd:b4:d1:f1:aa:8a:80:5b:6e:eb:47:87:38:56:9f: e0:51:27:f7:9a:79:d2:7a:8c:09:d1:d5:90:09:73: fd:9f:ad:30:59:ff:38:53:41:19:b7:a0:aa:a3:46: 26:ab:0b:61:5e:4c:d7:c0:0f:0d:1f:06:d5:b3:07: 87:b2:5a:00:5f:32:c2:55:e3:24:b6:41:ce:a7:bc: 2c:bc:a2:4b:59:45:5e:1a:fd:77:75:0b:02:32:c7: de:4a:ff:3a:1b:6a:f8:09:3a:cd:07:5c:ce:ee:04: 34:4c:dd:36:1c:01:ec:50:75:07:3a:ad:4a:b8:2d: dd:e1:b6:7c:9c:31:75:42:f6:4a:a8:ad:83:fe:be: b9:ab:e1:3f:af:cc:a1:44:32:87:a8:4c:7c:d5:4d: 1d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:78:C8:E6:9E:4E:BB:E8:61:01:A5:61:21:46:B8:7C:E2:83:FE:A3 X509v3 Authority Key Identifier: keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a3:98:64:38:a2:b1:57:3f:6a:a2:84:50:b2:39:96:05:78: d8:ce:1e:d0:54:9e:15:c2:50:c7:f2:e7:51:d3:47:28:c7:59: 5a:10:bb:f0:09:a1:ed:76:5d:37:11:6f:b1:1b:f5:90:88:19: 66:4c:b2:cb:25:87:14:ea:f3:98:df:92:8d:2e:55:79:78:80: cf:19:ea:c5:eb:be:d6:63:0e:76:f1:41:e1:53:ae:40:e8:fd: 9c:a7:c8:c2:e1:75:37:7e:bb:5e:0a:d4:f9:4e:6e:82:7e:c5: e6:0e:b1:6e:e4:ec:07:4c:d2:6e:10:2a:20:c9:fb:af:b1:dd: f5:b4:42:1d:85:9c:cd:98:d8:0d:54:05:22:dd:93:7e:08:7a: db:97:26:fc:14:4e:e1:c6:9a:47:2e:cc:35:82:85:ec:b2:da: 44:fd:1b:72:44:3c:c8:b8:b1:30:c7:ae:8c:23:57:5d:1f:0f: 42:5b:56:70:f8:49:8c:2b:0e:47:7f:ca:46:ff:83:35:20:c5: 44:fc:a5:eb:42:f8:ae:7c:27:df:6c:08:8f:73:28:45:0f:a4: ab:a7:e2:97:85:4c:59:a6:b2:7b:6d:bf:5c:3b:bd:b6:6b:17: 05:ba:c4:fa:42:9b:f1:ed:42:e9:2b:fc:f9:dc:a6:6d:7f:82: 68:ed:5f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1MDkxMTAvBgNVBAUTKDUxQkVBMzYwOTQyOUQ5MUIxQzRFNDAyMkRBNjhCRDY0 M0MzM0MzRkIwHhcNMjUwODA3MDI0NDM1WhcNMjUwODE0MDI0NDM1WjAYMRYwFAYD VQQDEw02ODk0MTMxNC00ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3ZmUTMde9QBbRnOD65Ztcq5YmB3pG6Xklh2m+YfIGnGBg0Ruw+zmVtVf5qB Lz9mEkj8m3YGxtgt5BzMhbb/57F8cDiDh3x2ka9TV4zOhDvhLp0Yq0zXcOSaMn/9 SOBMoyQ6C4DVHWvNtNHxqoqAW27rR4c4Vp/gUSf3mnnSeowJ0dWQCXP9n60wWf84 U0EZt6Cqo0YmqwthXkzXwA8NHwbVsweHsloAXzLCVeMktkHOp7wsvKJLWUVeGv13 dQsCMsfeSv86G2r4CTrNB1zO7gQ0TN02HAHsUHUHOq1KuC3d4bZ8nDF1QvZKqK2D /r65q+E/r8yhRDKHqEx81U0d/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG54yOae TrvoYQGlYSFGuHzig/6jMB8GA1UdIwQYMBaAFFG+o2CUKdkbHE5AItpovWQ8M8P7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTUwOS8yNzRFRDE1RTYw MUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJSc2NUa0FpMm1pOVpEd3p3 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ViNmpZSlFwMlJzY1RrQWkybWk5WkR3endfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTUwOS8yNzRFRDE1RTYwMUExMUVEQjc0MTZCNkNDNEY5QUUwMi9VYjZqWUpRcDJS c2NUa0FpMm1pOVpEd3p3X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5o5hkOKKxVz9qooRQsjmWBXjYzh7QVJ4VwlDH8udR00cox1laELvw CaHtdl03EW+xG/WQiBlmTLLLJYcU6vOY35KNLlV5eIDPGerF677WYw528UHhU65A 6P2cp8jC4XU3frteCtT5Tm6CfsXmDrFu5OwHTNJuECogyfuvsd31tEIdhZzNmNgN VAUi3ZN+CHrblyb8FE7hxppHLsw1goXsstpE/RtyRDzIuLEwx66MI1ddHw9CW1Zw +EmMKw5Hf8pG/4M1IMVE/KXrQviufCffbAiPcyhFD6Srp+KXhUxZprJ7bb9cO722 axcFusT6Qpvx7ULpK/z53KZtf4Jo7V/u -----END CERTIFICATE-----Generated at Fri Aug 8 19:33:47 2025 by rpki-client